mlme.c 17.3 KB
Newer Older
1 2 3 4 5 6 7 8 9 10
/*
 * cfg80211 MLME SAP interface
 *
 * Copyright (c) 2009, Jouni Malinen <j@w1.fi>
 */

#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/netdevice.h>
#include <linux/nl80211.h>
11
#include <linux/wireless.h>
12
#include <net/cfg80211.h>
13
#include <net/iw_handler.h>
14 15 16
#include "core.h"
#include "nl80211.h"

17
void cfg80211_send_rx_auth(struct net_device *dev, const u8 *buf, size_t len)
18
{
J
Johannes Berg 已提交
19 20
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
21
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
J
Johannes Berg 已提交
22 23 24 25 26 27
	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
	u8 *bssid = mgmt->bssid;
	int i;
	u16 status = le16_to_cpu(mgmt->u.auth.status_code);
	bool done = false;

J
Johannes Berg 已提交
28
	wdev_lock(wdev);
29

J
Johannes Berg 已提交
30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46
	for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (wdev->authtry_bsses[i] &&
		    memcmp(wdev->authtry_bsses[i]->pub.bssid, bssid,
							ETH_ALEN) == 0) {
			if (status == WLAN_STATUS_SUCCESS) {
				wdev->auth_bsses[i] = wdev->authtry_bsses[i];
			} else {
				cfg80211_unhold_bss(wdev->authtry_bsses[i]);
				cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
			}
			wdev->authtry_bsses[i] = NULL;
			done = true;
			break;
		}
	}

	WARN_ON(!done);
47

48
	nl80211_send_rx_auth(rdev, dev, buf, len, GFP_KERNEL);
49
	cfg80211_sme_rx_auth(dev, buf, len);
J
Johannes Berg 已提交
50 51

	wdev_unlock(wdev);
52 53 54
}
EXPORT_SYMBOL(cfg80211_send_rx_auth);

55
void cfg80211_send_rx_assoc(struct net_device *dev, const u8 *buf, size_t len)
56
{
57 58 59
	u16 status_code;
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
60
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
61 62
	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
	u8 *ie = mgmt->u.assoc_resp.variable;
J
Johannes Berg 已提交
63
	int i, ieoffs = offsetof(struct ieee80211_mgmt, u.assoc_resp.variable);
64
	struct cfg80211_internal_bss *bss = NULL;
65

J
Johannes Berg 已提交
66
	wdev_lock(wdev);
67

68 69
	status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code);

70 71 72 73 74 75 76 77 78 79
	/*
	 * This is a bit of a hack, we don't notify userspace of
	 * a (re-)association reply if we tried to send a reassoc
	 * and got a reject -- we only try again with an assoc
	 * frame instead of reassoc.
	 */
	if (status_code != WLAN_STATUS_SUCCESS && wdev->conn &&
	    cfg80211_sme_failed_reassoc(wdev))
		goto out;

80
	nl80211_send_rx_assoc(rdev, dev, buf, len, GFP_KERNEL);
81

J
Johannes Berg 已提交
82
	if (status_code == WLAN_STATUS_SUCCESS) {
83 84 85 86 87 88
		for (i = 0; i < MAX_AUTH_BSSES; i++) {
			if (!wdev->auth_bsses[i])
				continue;
			if (memcmp(wdev->auth_bsses[i]->pub.bssid, mgmt->bssid,
				   ETH_ALEN) == 0) {
				bss = wdev->auth_bsses[i];
J
Johannes Berg 已提交
89
				wdev->auth_bsses[i] = NULL;
90 91
				/* additional reference to drop hold */
				cfg80211_ref_bss(bss);
J
Johannes Berg 已提交
92 93 94 95
				break;
			}
		}

96
		WARN_ON(!bss);
97 98 99 100 101 102 103
	} else if (wdev->conn) {
		cfg80211_sme_failed_assoc(wdev);
		/*
		 * do not call connect_result() now because the
		 * sme will schedule work that does it later.
		 */
		goto out;
104 105
	}

106 107 108 109 110 111 112 113 114
	if (!wdev->conn && wdev->sme_state == CFG80211_SME_IDLE) {
		/*
		 * This is for the userspace SME, the CONNECTING
		 * state will be changed to CONNECTED by
		 * __cfg80211_connect_result() below.
		 */
		wdev->sme_state = CFG80211_SME_CONNECTING;
	}

115 116 117 118 119 120 121 122 123
	/* this consumes one bss reference (unless bss is NULL) */
	__cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, ie, len - ieoffs,
				  status_code,
				  status_code == WLAN_STATUS_SUCCESS,
				  bss ? &bss->pub : NULL);
	/* drop hold now, and also reference acquired above */
	if (bss) {
		cfg80211_unhold_bss(bss);
		cfg80211_put_bss(&bss->pub);
J
Johannes Berg 已提交
124
	}
J
Johannes Berg 已提交
125

126
 out:
J
Johannes Berg 已提交
127
	wdev_unlock(wdev);
128 129 130
}
EXPORT_SYMBOL(cfg80211_send_rx_assoc);

131
void __cfg80211_send_deauth(struct net_device *dev,
J
Johannes Berg 已提交
132
				   const u8 *buf, size_t len)
133
{
134 135
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
136
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
137
	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
J
Johannes Berg 已提交
138 139
	const u8 *bssid = mgmt->bssid;
	int i;
140

J
Johannes Berg 已提交
141
	ASSERT_WDEV_LOCK(wdev);
142 143

	nl80211_send_deauth(rdev, dev, buf, len, GFP_KERNEL);
144

J
Johannes Berg 已提交
145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166
	if (wdev->current_bss &&
	    memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) {
		cfg80211_unhold_bss(wdev->current_bss);
		cfg80211_put_bss(&wdev->current_bss->pub);
		wdev->current_bss = NULL;
	} else for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (wdev->auth_bsses[i] &&
		    memcmp(wdev->auth_bsses[i]->pub.bssid, bssid, ETH_ALEN) == 0) {
			cfg80211_unhold_bss(wdev->auth_bsses[i]);
			cfg80211_put_bss(&wdev->auth_bsses[i]->pub);
			wdev->auth_bsses[i] = NULL;
			break;
		}
		if (wdev->authtry_bsses[i] &&
		    memcmp(wdev->authtry_bsses[i]->pub.bssid, bssid, ETH_ALEN) == 0) {
			cfg80211_unhold_bss(wdev->authtry_bsses[i]);
			cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
			wdev->authtry_bsses[i] = NULL;
			break;
		}
	}

167 168 169 170 171 172
	if (wdev->sme_state == CFG80211_SME_CONNECTED) {
		u16 reason_code;
		bool from_ap;

		reason_code = le16_to_cpu(mgmt->u.deauth.reason_code);

173
		from_ap = memcmp(mgmt->sa, dev->dev_addr, ETH_ALEN) != 0;
J
Johannes Berg 已提交
174
		__cfg80211_disconnected(dev, NULL, 0, reason_code, from_ap);
175
	} else if (wdev->sme_state == CFG80211_SME_CONNECTING) {
J
Johannes Berg 已提交
176 177
		__cfg80211_connect_result(dev, mgmt->bssid, NULL, 0, NULL, 0,
					  WLAN_STATUS_UNSPECIFIED_FAILURE,
178
					  false, NULL);
J
Johannes Berg 已提交
179 180
	}
}
181
EXPORT_SYMBOL(__cfg80211_send_deauth);
J
Johannes Berg 已提交
182

183
void cfg80211_send_deauth(struct net_device *dev, const u8 *buf, size_t len)
J
Johannes Berg 已提交
184 185 186
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;

187 188 189
	wdev_lock(wdev);
	__cfg80211_send_deauth(dev, buf, len);
	wdev_unlock(wdev);
190
}
191
EXPORT_SYMBOL(cfg80211_send_deauth);
192

193
void __cfg80211_send_disassoc(struct net_device *dev,
J
Johannes Berg 已提交
194
				     const u8 *buf, size_t len)
195
{
196 197
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
198
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
199
	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)buf;
J
Johannes Berg 已提交
200 201 202 203 204
	const u8 *bssid = mgmt->bssid;
	int i;
	u16 reason_code;
	bool from_ap;
	bool done = false;
205

206
	ASSERT_WDEV_LOCK(wdev);
207 208

	nl80211_send_disassoc(rdev, dev, buf, len, GFP_KERNEL);
209

210 211
	if (wdev->sme_state != CFG80211_SME_CONNECTED)
		return;
212

J
Johannes Berg 已提交
213
	if (wdev->current_bss &&
214
	    memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) {
J
Johannes Berg 已提交
215 216 217 218 219 220 221 222 223 224 225 226
		for (i = 0; i < MAX_AUTH_BSSES; i++) {
			if (wdev->authtry_bsses[i] || wdev->auth_bsses[i])
				continue;
			wdev->auth_bsses[i] = wdev->current_bss;
			wdev->current_bss = NULL;
			done = true;
			cfg80211_sme_disassoc(dev, i);
			break;
		}
		WARN_ON(!done);
	} else
		WARN_ON(1);
227 228


J
Johannes Berg 已提交
229 230
	reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code);

231
	from_ap = memcmp(mgmt->sa, dev->dev_addr, ETH_ALEN) != 0;
J
Johannes Berg 已提交
232 233
	__cfg80211_disconnected(dev, NULL, 0, reason_code, from_ap);
}
234
EXPORT_SYMBOL(__cfg80211_send_disassoc);
J
Johannes Berg 已提交
235

236
void cfg80211_send_disassoc(struct net_device *dev, const u8 *buf, size_t len)
J
Johannes Berg 已提交
237 238 239
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;

240 241 242
	wdev_lock(wdev);
	__cfg80211_send_disassoc(dev, buf, len);
	wdev_unlock(wdev);
243
}
244
EXPORT_SYMBOL(cfg80211_send_disassoc);
245

246
void cfg80211_send_auth_timeout(struct net_device *dev, const u8 *addr)
247
{
248 249
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
250
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
J
Johannes Berg 已提交
251 252 253
	int i;
	bool done = false;

J
Johannes Berg 已提交
254
	wdev_lock(wdev);
255 256

	nl80211_send_auth_timeout(rdev, dev, addr, GFP_KERNEL);
257
	if (wdev->sme_state == CFG80211_SME_CONNECTING)
J
Johannes Berg 已提交
258 259
		__cfg80211_connect_result(dev, addr, NULL, 0, NULL, 0,
					  WLAN_STATUS_UNSPECIFIED_FAILURE,
260
					  false, NULL);
J
Johannes Berg 已提交
261 262 263 264 265 266 267 268 269 270 271 272 273 274

	for (i = 0; addr && i < MAX_AUTH_BSSES; i++) {
		if (wdev->authtry_bsses[i] &&
		    memcmp(wdev->authtry_bsses[i]->pub.bssid,
			   addr, ETH_ALEN) == 0) {
			cfg80211_unhold_bss(wdev->authtry_bsses[i]);
			cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
			wdev->authtry_bsses[i] = NULL;
			done = true;
			break;
		}
	}

	WARN_ON(!done);
J
Johannes Berg 已提交
275 276

	wdev_unlock(wdev);
277 278 279
}
EXPORT_SYMBOL(cfg80211_send_auth_timeout);

280
void cfg80211_send_assoc_timeout(struct net_device *dev, const u8 *addr)
281
{
282 283
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct wiphy *wiphy = wdev->wiphy;
284
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
J
Johannes Berg 已提交
285 286 287
	int i;
	bool done = false;

J
Johannes Berg 已提交
288
	wdev_lock(wdev);
289 290

	nl80211_send_assoc_timeout(rdev, dev, addr, GFP_KERNEL);
291
	if (wdev->sme_state == CFG80211_SME_CONNECTING)
J
Johannes Berg 已提交
292 293
		__cfg80211_connect_result(dev, addr, NULL, 0, NULL, 0,
					  WLAN_STATUS_UNSPECIFIED_FAILURE,
294
					  false, NULL);
J
Johannes Berg 已提交
295 296 297 298 299 300 301 302 303 304 305 306 307 308

	for (i = 0; addr && i < MAX_AUTH_BSSES; i++) {
		if (wdev->auth_bsses[i] &&
		    memcmp(wdev->auth_bsses[i]->pub.bssid,
			   addr, ETH_ALEN) == 0) {
			cfg80211_unhold_bss(wdev->auth_bsses[i]);
			cfg80211_put_bss(&wdev->auth_bsses[i]->pub);
			wdev->auth_bsses[i] = NULL;
			done = true;
			break;
		}
	}

	WARN_ON(!done);
J
Johannes Berg 已提交
309 310

	wdev_unlock(wdev);
311 312 313
}
EXPORT_SYMBOL(cfg80211_send_assoc_timeout);

314 315
void cfg80211_michael_mic_failure(struct net_device *dev, const u8 *addr,
				  enum nl80211_key_type key_type, int key_id,
316
				  const u8 *tsc, gfp_t gfp)
317 318 319
{
	struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
J
Johannes Berg 已提交
320
#ifdef CONFIG_CFG80211_WEXT
321
	union iwreq_data wrqu;
322
	char *buf = kmalloc(128, gfp);
323 324 325 326 327 328 329 330 331 332 333 334 335

	if (buf) {
		sprintf(buf, "MLME-MICHAELMICFAILURE.indication("
			"keyid=%d %scast addr=%pM)", key_id,
			key_type == NL80211_KEYTYPE_GROUP ? "broad" : "uni",
			addr);
		memset(&wrqu, 0, sizeof(wrqu));
		wrqu.data.length = strlen(buf);
		wireless_send_event(dev, IWEVCUSTOM, &wrqu, buf);
		kfree(buf);
	}
#endif

336
	nl80211_michael_mic_failure(rdev, dev, addr, key_type, key_id, tsc, gfp);
337 338
}
EXPORT_SYMBOL(cfg80211_michael_mic_failure);
J
Johannes Berg 已提交
339 340

/* some MLME handling for userspace SME */
J
Johannes Berg 已提交
341 342 343 344 345 346
int __cfg80211_mlme_auth(struct cfg80211_registered_device *rdev,
			 struct net_device *dev,
			 struct ieee80211_channel *chan,
			 enum nl80211_auth_type auth_type,
			 const u8 *bssid,
			 const u8 *ssid, int ssid_len,
J
Johannes Berg 已提交
347 348
			 const u8 *ie, int ie_len,
			 const u8 *key, int key_len, int key_idx)
J
Johannes Berg 已提交
349 350 351 352 353 354
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct cfg80211_auth_request req;
	struct cfg80211_internal_bss *bss;
	int i, err, slot = -1, nfree = 0;

J
Johannes Berg 已提交
355 356
	ASSERT_WDEV_LOCK(wdev);

J
Johannes Berg 已提交
357 358 359 360
	if (auth_type == NL80211_AUTHTYPE_SHARED_KEY)
		if (!key || !key_len || key_idx < 0 || key_idx > 4)
			return -EINVAL;

361 362 363 364 365 366 367 368 369 370 371 372 373 374 375
	if (wdev->current_bss &&
	    memcmp(bssid, wdev->current_bss->pub.bssid, ETH_ALEN) == 0)
		return -EALREADY;

	for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (wdev->authtry_bsses[i] &&
		    memcmp(bssid, wdev->authtry_bsses[i]->pub.bssid,
						ETH_ALEN) == 0)
			return -EALREADY;
		if (wdev->auth_bsses[i] &&
		    memcmp(bssid, wdev->auth_bsses[i]->pub.bssid,
						ETH_ALEN) == 0)
			return -EALREADY;
	}

J
Johannes Berg 已提交
376 377 378 379 380 381 382
	memset(&req, 0, sizeof(req));

	req.ie = ie;
	req.ie_len = ie_len;
	req.auth_type = auth_type;
	req.bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid, ssid, ssid_len,
				   WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
J
Johannes Berg 已提交
383 384 385
	req.key = key;
	req.key_len = key_len;
	req.key_idx = key_idx;
J
Johannes Berg 已提交
386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418
	if (!req.bss)
		return -ENOENT;

	bss = bss_from_pub(req.bss);

	for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (!wdev->auth_bsses[i] && !wdev->authtry_bsses[i]) {
			slot = i;
			nfree++;
		}
	}

	/* we need one free slot for disassoc and one for this auth */
	if (nfree < 2) {
		err = -ENOSPC;
		goto out;
	}

	wdev->authtry_bsses[slot] = bss;
	cfg80211_hold_bss(bss);

	err = rdev->ops->auth(&rdev->wiphy, dev, &req);
	if (err) {
		wdev->authtry_bsses[slot] = NULL;
		cfg80211_unhold_bss(bss);
	}

 out:
	if (err)
		cfg80211_put_bss(req.bss);
	return err;
}

J
Johannes Berg 已提交
419 420 421 422
int cfg80211_mlme_auth(struct cfg80211_registered_device *rdev,
		       struct net_device *dev, struct ieee80211_channel *chan,
		       enum nl80211_auth_type auth_type, const u8 *bssid,
		       const u8 *ssid, int ssid_len,
J
Johannes Berg 已提交
423 424
		       const u8 *ie, int ie_len,
		       const u8 *key, int key_len, int key_idx)
J
Johannes Berg 已提交
425 426 427 428 429
{
	int err;

	wdev_lock(dev->ieee80211_ptr);
	err = __cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
J
Johannes Berg 已提交
430 431
				   ssid, ssid_len, ie, ie_len,
				   key, key_len, key_idx);
J
Johannes Berg 已提交
432 433 434 435 436 437 438 439 440 441 442 443
	wdev_unlock(dev->ieee80211_ptr);

	return err;
}

int __cfg80211_mlme_assoc(struct cfg80211_registered_device *rdev,
			  struct net_device *dev,
			  struct ieee80211_channel *chan,
			  const u8 *bssid, const u8 *prev_bssid,
			  const u8 *ssid, int ssid_len,
			  const u8 *ie, int ie_len, bool use_mfp,
			  struct cfg80211_crypto_settings *crypt)
J
Johannes Berg 已提交
444 445 446 447 448
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct cfg80211_assoc_request req;
	struct cfg80211_internal_bss *bss;
	int i, err, slot = -1;
449
	bool was_connected = false;
J
Johannes Berg 已提交
450

J
Johannes Berg 已提交
451 452
	ASSERT_WDEV_LOCK(wdev);

J
Johannes Berg 已提交
453 454
	memset(&req, 0, sizeof(req));

455 456 457 458 459 460 461 462 463 464 465
	if (wdev->current_bss && prev_bssid &&
	    memcmp(wdev->current_bss->pub.bssid, prev_bssid, ETH_ALEN) == 0) {
		/*
		 * Trying to reassociate: Allow this to proceed and let the old
		 * association to be dropped when the new one is completed.
		 */
		if (wdev->sme_state == CFG80211_SME_CONNECTED) {
			was_connected = true;
			wdev->sme_state = CFG80211_SME_CONNECTING;
		}
	} else if (wdev->current_bss)
J
Johannes Berg 已提交
466 467 468 469 470 471
		return -EALREADY;

	req.ie = ie;
	req.ie_len = ie_len;
	memcpy(&req.crypto, crypt, sizeof(req.crypto));
	req.use_mfp = use_mfp;
472
	req.prev_bssid = prev_bssid;
J
Johannes Berg 已提交
473 474
	req.bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid, ssid, ssid_len,
				   WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
475 476 477
	if (!req.bss) {
		if (was_connected)
			wdev->sme_state = CFG80211_SME_CONNECTED;
J
Johannes Berg 已提交
478
		return -ENOENT;
479
	}
J
Johannes Berg 已提交
480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496

	bss = bss_from_pub(req.bss);

	for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (bss == wdev->auth_bsses[i]) {
			slot = i;
			break;
		}
	}

	if (slot < 0) {
		err = -ENOTCONN;
		goto out;
	}

	err = rdev->ops->assoc(&rdev->wiphy, dev, &req);
 out:
497 498
	if (err && was_connected)
		wdev->sme_state = CFG80211_SME_CONNECTED;
J
Johannes Berg 已提交
499 500 501 502 503
	/* still a reference in wdev->auth_bsses[slot] */
	cfg80211_put_bss(req.bss);
	return err;
}

J
Johannes Berg 已提交
504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525
int cfg80211_mlme_assoc(struct cfg80211_registered_device *rdev,
			struct net_device *dev,
			struct ieee80211_channel *chan,
			const u8 *bssid, const u8 *prev_bssid,
			const u8 *ssid, int ssid_len,
			const u8 *ie, int ie_len, bool use_mfp,
			struct cfg80211_crypto_settings *crypt)
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	int err;

	wdev_lock(wdev);
	err = __cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
				    ssid, ssid_len, ie, ie_len, use_mfp, crypt);
	wdev_unlock(wdev);

	return err;
}

int __cfg80211_mlme_deauth(struct cfg80211_registered_device *rdev,
			   struct net_device *dev, const u8 *bssid,
			   const u8 *ie, int ie_len, u16 reason)
J
Johannes Berg 已提交
526 527 528 529 530
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct cfg80211_deauth_request req;
	int i;

J
Johannes Berg 已提交
531 532
	ASSERT_WDEV_LOCK(wdev);

J
Johannes Berg 已提交
533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555
	memset(&req, 0, sizeof(req));
	req.reason_code = reason;
	req.ie = ie;
	req.ie_len = ie_len;
	if (wdev->current_bss &&
	    memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0) {
		req.bss = &wdev->current_bss->pub;
	} else for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (wdev->auth_bsses[i] &&
		    memcmp(bssid, wdev->auth_bsses[i]->pub.bssid, ETH_ALEN) == 0) {
			req.bss = &wdev->auth_bsses[i]->pub;
			break;
		}
		if (wdev->authtry_bsses[i] &&
		    memcmp(bssid, wdev->authtry_bsses[i]->pub.bssid, ETH_ALEN) == 0) {
			req.bss = &wdev->authtry_bsses[i]->pub;
			break;
		}
	}

	if (!req.bss)
		return -ENOTCONN;

J
Johannes Berg 已提交
556
	return rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
J
Johannes Berg 已提交
557 558
}

J
Johannes Berg 已提交
559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575
int cfg80211_mlme_deauth(struct cfg80211_registered_device *rdev,
			 struct net_device *dev, const u8 *bssid,
			 const u8 *ie, int ie_len, u16 reason)
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	int err;

	wdev_lock(wdev);
	err = __cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason);
	wdev_unlock(wdev);

	return err;
}

static int __cfg80211_mlme_disassoc(struct cfg80211_registered_device *rdev,
				    struct net_device *dev, const u8 *bssid,
				    const u8 *ie, int ie_len, u16 reason)
J
Johannes Berg 已提交
576 577 578 579
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct cfg80211_disassoc_request req;

J
Johannes Berg 已提交
580 581
	ASSERT_WDEV_LOCK(wdev);

582 583 584 585 586 587
	if (wdev->sme_state != CFG80211_SME_CONNECTED)
		return -ENOTCONN;

	if (WARN_ON(!wdev->current_bss))
		return -ENOTCONN;

J
Johannes Berg 已提交
588 589 590 591 592 593 594 595 596
	memset(&req, 0, sizeof(req));
	req.reason_code = reason;
	req.ie = ie;
	req.ie_len = ie_len;
	if (memcmp(wdev->current_bss->pub.bssid, bssid, ETH_ALEN) == 0)
		req.bss = &wdev->current_bss->pub;
	else
		return -ENOTCONN;

J
Johannes Berg 已提交
597 598 599 600 601 602 603 604 605 606 607 608 609 610 611
	return rdev->ops->disassoc(&rdev->wiphy, dev, &req, wdev);
}

int cfg80211_mlme_disassoc(struct cfg80211_registered_device *rdev,
			   struct net_device *dev, const u8 *bssid,
			   const u8 *ie, int ie_len, u16 reason)
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	int err;

	wdev_lock(wdev);
	err = __cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason);
	wdev_unlock(wdev);

	return err;
J
Johannes Berg 已提交
612 613 614 615 616 617 618 619 620
}

void cfg80211_mlme_down(struct cfg80211_registered_device *rdev,
			struct net_device *dev)
{
	struct wireless_dev *wdev = dev->ieee80211_ptr;
	struct cfg80211_deauth_request req;
	int i;

J
Johannes Berg 已提交
621 622
	ASSERT_WDEV_LOCK(wdev);

J
Johannes Berg 已提交
623 624 625 626 627 628 629 630 631 632
	if (!rdev->ops->deauth)
		return;

	memset(&req, 0, sizeof(req));
	req.reason_code = WLAN_REASON_DEAUTH_LEAVING;
	req.ie = NULL;
	req.ie_len = 0;

	if (wdev->current_bss) {
		req.bss = &wdev->current_bss->pub;
J
Johannes Berg 已提交
633
		rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
J
Johannes Berg 已提交
634 635 636 637 638 639 640 641 642 643
		if (wdev->current_bss) {
			cfg80211_unhold_bss(wdev->current_bss);
			cfg80211_put_bss(&wdev->current_bss->pub);
			wdev->current_bss = NULL;
		}
	}

	for (i = 0; i < MAX_AUTH_BSSES; i++) {
		if (wdev->auth_bsses[i]) {
			req.bss = &wdev->auth_bsses[i]->pub;
J
Johannes Berg 已提交
644
			rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
J
Johannes Berg 已提交
645 646 647 648 649 650 651 652
			if (wdev->auth_bsses[i]) {
				cfg80211_unhold_bss(wdev->auth_bsses[i]);
				cfg80211_put_bss(&wdev->auth_bsses[i]->pub);
				wdev->auth_bsses[i] = NULL;
			}
		}
		if (wdev->authtry_bsses[i]) {
			req.bss = &wdev->authtry_bsses[i]->pub;
J
Johannes Berg 已提交
653
			rdev->ops->deauth(&rdev->wiphy, dev, &req, wdev);
J
Johannes Berg 已提交
654 655 656 657 658 659 660 661
			if (wdev->authtry_bsses[i]) {
				cfg80211_unhold_bss(wdev->authtry_bsses[i]);
				cfg80211_put_bss(&wdev->authtry_bsses[i]->pub);
				wdev->authtry_bsses[i] = NULL;
			}
		}
	}
}